CVE-2003-0703

KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar techniques" using exchangeKernel.sh.

• http://www.atstake.com/research/advisories/2003/a082203-1.txtPatch, Vendor Advisory
• http://www.securityfocus.com/bid/8497Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13007
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13008
• http://www.atstake.com/research/advisories/2003/a082203-1.txtPatch, Vendor Advisory
• http://www.securityfocus.com/bid/8497Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13007
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13008

Published

Sep 17, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0697Format string vulnerability in lpd in the bos.rte.printers f…
• CVE-2003-0698Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0699The C-Media PCI sound driver in Linux before 2.4.21 does not…
• CVE-2003-0700The C-Media PCI sound driver in Linux before 2.4.22 does not…
• CVE-2003-0701Buffer overflow in Internet Explorer 6 SP1 for certain langu…
• CVE-2003-0702Unknown vulnerability in an ISAPI plugin for ISS Server Sens…
• CVE-2003-0704KisMAC before 0.05d trusts user-supplied variables when chow…
• CVE-2003-0705Buffer overflow in mah-jong 1.5.6 and earlier allows remote …
• CVE-2003-0706Unknown vulnerability in mah-jong 1.5.6 and earlier allows r…
• CVE-2003-0707Buffer overflow in LinuxNode (node) before 0.3.2 allows remo…
• CVE-2003-0708Format string vulnerability in LinuxNode (node) before 0.3.2…
• CVE-2003-0709Buffer overflow in the whois client, which is not setuid but…